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ABSTRACT 

A method and system for detecting malicious content including the steps 
of examining at least two characteristics of a digital object, analyzing the at least two 
characteristics to determine whether there exists a mismatch therebetween and upon 
determination of the existence of a mismatch, classifying the digital object as a digital 
object possibly containing malicious content. 
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